Bugzilla

### Security Approval Request
* **How easily could an exploit be constructed based on the patch?**: Fairly easily once you figure out what the problem is, and that shouldn't be too hard.
* **Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?**: Yes
* **Which older supported branches are affected by this flaw?**: all
* **If not all supported branches, which bug introduced the flaw?**: None
* **Do you have backports for the affected branches?**: Yes
* **If not, how different, hard to create, and risky will they be?**: 
* **How likely is this patch to cause regressions; how much testing does it need?**:

### Security Approval Request
* **How easily could an exploit be constructed based on the patch?**: Fairly easily once you figure out what the problem is, and that shouldn't be too hard.
* **Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?**: Yes
* **Which older supported branches are affected by this flaw?**: all
* **If not all supported branches, which bug introduced the flaw?**: None
* **Do you have backports for the affected branches?**: Yes
* **If not, how different, hard to create, and risky will they be?**: applies cleanly on esr68
* **How likely is this patch to cause regressions; how much testing does it need?**: Unlikely to cause regression  (90% confidence)